In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.

CPENameOperatorVersion
py3-cryptographyeq2.8-r1
cryptographyeq2.3
py3-cryptographyeq1.4-r2
cryptographyeq1.8
py3-cryptographyeq1.5.2-r0
py3-cryptographyeq2.8-r0
py3-cryptographyeq2.6.1-r1
cryptographyeq2.1
cryptographyeq0.5.1
py3-cryptographyeq2.0.2-r0

Name	Operator	Version
py3-cryptography	eq	2.8-r1
cryptography	eq	2.3
py3-cryptography	eq	1.4-r2
cryptography	eq	1.8
py3-cryptography	eq	1.5.2-r0
py3-cryptography	eq	2.8-r0
py3-cryptography	eq	2.6.1-r1
cryptography	eq	2.1
cryptography	eq	0.5.1
py3-cryptography	eq	2.0.2-r0